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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 


SUBCOURSE 26-6, MILITARY CRYPTANALYSIS, PART I 
MONOALPHABETIC SUBSTITUTION SYSTEMS 


Security Considerations. 


This course and the accompanying text have been dassined RE!S4'R10CfElD to facilitate 
their dissemination to extension students of the Army Security Reserve. Nevertheless, 
this material is to be safeguarded in the same manner as OOHFIDElU'±'l:hL matter, and 
every precaution will be taken to prevent disclosure to unauthorized personnel. 


Introduction. 


This·is the first of a series of subcourses on the science of military cryptanalytics. The 
purpose of this subcourse is to teach the student the methods of analysis of systems which 
form a basis for the more simple military cip!ier systems. An understanding of these prin- 
ciples is necessary to grasp the advanced cryptanalytic techniques employed in the attack 
on the complex systems which comprise present-day military cryptography. 


The scope of this subcourse is: fundamental principles; uniliteral substitution; poly- 


literat substitution; polygraphic substitution; and miscellaneous monoalphabetic substi- 
tution systems. It consists of nine lessons and an examination as follows: 
Lesson 1, Fundamental principles; frequency distributions. 
Lesson 2, Uniliteral substitution with standard cipher alphabets. 
Lesson 3, Uniliteral substitution.with mixed cipher alphabets. 
Lesson 4, Polyliteral substitution with mono-equivalent cipher alphabets. 
Lesson 5, Polyliteral substitution with poly-equivalent ciP.her alphabets .. 
Lesson 6, Polygraphic substitution: 4-square and 2-square matrices. 
Lesson 7, Polygraphic substitution: Playfair systems. 
Lesson 8, Polygraphic substitution: quadricular tables. 
Lesson 9, Miscellaneous monoalphabetic substitution systems. 
Examination. 


30 credits are allowed for the subcourse. You will not be limited as to the number of 
hours you may spend in the solution of the subcourse, any lesson, or the examination. For 
statistical purposes you are required to enter the number of hours spent on solution in the 
answer sheet. 


Texts and materials furnished: 


Military Cryptanalysis, Part I (1942). 
*Appendix 2(November1946). 
*TM 11-484, Elementary Military Cryptography, March 1945. 
*TM 11-485, Advanced Military Cryptography, 8 June 1944. 
*Strip device (ASA Training Aid No. 1). 
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*Printed and blank alphabet strips (Training Aid No. 2). 
Cross-section paper. 


*This mat.erial may be retained _upon completion of the subcourae. No other materiaJs are required. 


This course was prepared under the direction of the Chief, Army Security Agency. 


Special Instrucdons. 


So far as practicable, detailed work sheet.a which usually form a part of the solution 
should be submitted with the solutions. · In all the lessons of this. subcourse, it is required 
that the student recover ail the cipher and plain text alphabet.a used. He will also be re- 
quired to state the method of operation of each system and give the keys upon which each 
component is based. The specific keys and any cipher table employed must be recovered. 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
LESSON 1 


Milit.ary Cryptanalysis, Part I 
Fundamental principles; frequency 
distributions 
CREDIT 
3 
TEXT ASSIGNMENT 
Text, Sections I to IV, inclusive; 
attached memoranda 
MATERIALS REQUIRED 
SUGGESTIONS 
EXERCISES 


Cross-section paper. of ~ inch squares 
None 


Weight 


4 


.2 


2 


10 


2 


2 


2 


2 


4 


1. What four fundamental operations are involved in the solution of practi- 
cally every cryptogram? 


2. In the solution of cryptograms involving a form of substitution to what 
simple terms is it n~ 
to redu~e them in order to reach a solution? 


3. Is it always necessary to determine the specific key in order to reconstruct 
the plain text? 


4~ Using cross-section paper prepare a uniliteral frequency bar distribution 
of the letters of the following paragraph: 
· 


. "The shortest and surest way to live with honor in the world 
is to be in reality what we would appear to be; all human 
\tirtues increase and strengthen themselves by the practice 
and experience of them." 


· 5. a: What percent (in round numbers) of the letters in English telegraphic 


ieXt are E's? 
· 


b. What are the four most frequent consonants in English telegraphic text? 
c. What are the four most frequent digraphs in English telegraphic text? 


d. Account for ·the discrepancies between frequencies of letters in English 
literary text and English telegraphic text. 


6. What four f~ts can be determined from a study of the uniliteral frequency 


distribution of. a cryptogram? 
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5 
7. Determine the class to which the cipher systems, which were used in en- 
ciphering the following messages, belong: 


a. 0 R A N A 
T H P N 0 
S K T C D M E E E S 
C E R A E 


RN US A E'T LG D AYE CA 


-- 
:::::: 
~ ~~~ ~~ 
~~~~~~ ~~~~ 
~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


5 
b. D H J J K 
Q 0 A H R 
X K S 0 F 
H P Q G A 
P P H L A 
DIADE HJROA MAHQA 


::::::: 
-- 
~ 
-- 
~ -- 
------ 
~ 
~~~~~~~~~~ ~~~~~ 
~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


5 
c. R 0 L E H K B W F Z C Q C P Z N V J W Z M I V E Q 


EPCIN OJSJU YMWQB 


:::::: -- -- 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


8. Which of the following 'substitution ciphers are monoalphabetic? 


5 
a. UJKLW EUVKL FSPAQ PHTKR DZNGL 
SELYN XYXBX JDATU'WEUZG WFVXM 


M N Z A Y 
A 0 S G U D C L G I 
O_ E W J E 
I F 0 K M 


K N W A P K 0 I E V. A R 0 E V W S C W N S B C Y X 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


5 
b. 
H U . P Y P 
X X A E P 
A F G Z P 
V G L H A 
S L X H U 


RBSTIHGTSB 


SXXAY PWKAS LHPRH AL OBA XPLVS 
WUPJP OBSHU HUPGF XGKPH PVSWU 
PJOPZ SVPYS MPOAX ULSLP CGNJX 


2 


l 
5 


5 


l 
5 


5 


c. GXYVL 
GMXLW 
VHMXA 
RTYYZ 
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ZXMXS L 0 Z GR 
QI V Z W QB RX K 


L 0 TL Y TKDWX 
KT 0 X G AWXLQ 
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WE J L X 
KTDVL 
GB Q K Q 


L 0 Z GR 


::::::: 
::::::: 


PWTKZ 
MXAEX 
LWZXG 
XVWGQ 


~::::::: 
:::::::::::::: 
~---~-§ §_i§_i I~-§~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


9 .. The following messages were enciphered monoalphabetically .. Determine 
in each case whether the cipher alphabet used was a standard or mixed alphabet 
and if standard, whether direct or reversed. 


a. ANVOR LOUNQ RLEZW ZHNEZ W Z B 0 R 


ZKYLF·AOZSO 0 N 0 RF PJZPP ·L DZ D N 
LRZLB LABWZ HNAPO W Q H 0 0 R Z I Z U 


---~-... 
......... 


::::::: 


:::: :::::: 
::::::: 
- -- 


:::::: ::::::: :::::::: 
=::::---...-...1 
l~~::::-1- 
-.. 
::::::: 
:::::::- 
--- 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


b. E S p· A P LVDLY 0 EC Z F RSDTY ESTDO 


TDECT MFETZ YBFTN V W J T .0 PYETQ 
J TEL D 0 TCP N EDE LY 0 L C 0 N TASPC 
- 
_§ 
- 
. 
-~ 
:::::::-1~1~ 
::::::: 
~-~11--~1 :::::::- 
I::::: 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


c. PYHYL X 0 L WY J J v y·x 0 IL YR YQYPJ 


KN Y L K YHYLC PAY AC LYXIR QYJVO 
Z K 0 X C -PC RE K UKUPJ I U J U 0 PR I AS 
-· 
::::::: 


-::::: 
::::§ii~ 
- - - 
-~ 
~ 
...... 11:::::::: ...... 
:::::-- 
;::::I 
::::::: - 
------....-- 
.......... 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 
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25 
10. From the intercepted traffic of three intercept stations operating in the 
same sector of the front, the following messages were selected for study by a member 
of the cryptanalytic section at GHQ. They are undoubtedly three versions of 
one enemy message, but there appears to be a number of differences, due no doubt 
to operating difficulties at the several stations. Study the messages and recon- 
struct from them the actual message sent by the enemy station. 


I. Time intercepted 1612 by HS 
G R 
35 
B T 


WFF V LDC 


N R l 7 D Y B I E D U F T 0 A M E J A K I B 0 N 


SGCOY FOBAK DODLA LUFYD KAWAL 


A P A Y N 
C 0 D A P 
K E D U R 
J 0 P I D 
J E N 0 X 
MEHAZ LOGIS KUTEG EVAUK IPBEM 


K E H Z A 
H 0 B W E A V D U Z 
F 0 F A 
E M' C 0 Z 


E G B L 0 
D 0 F Y 0 E N C 
M A W E N 


-· - - - - 
II. Time intercepted 1610 by MR 
MFF V LDC 


G R 
35 
B T 


N R I 


I PK 0 


D Y B I E B U F T 0 A M E J A K I B 0 N 


F 
BAK DO DLA LUFYL KAWAL 


A PAYN----- 
DUA __ PID JENOX 


N E H A Z L 0 G I S K U T E G E V A U C I R B W 


K E H Z A 
S 0 ~ W E 
V A D U Z 
F 0 F E T 
E M C 0 Z 
E G B L 0 D 0 F Y 0 A E C D A M A W E N 
0 M 
E M C 0 Z A C F A H L 0 F I R 0 9 3 5 


III. Time intercepted 1612 by YG 
WFF V LDK 


GR 
BT 
N R l 7 D Y B I E D U F T 0 A M E J A K S B 0 N 


I P C 0 Y 
A 
D 0 _ _, _ 
L U F Y L 
K A W A L 


A P E T Y N C 0 D A P K E P Q ~ W 0 P I D J E N 0 X 
MEHAZ L 0 G H K U T E G EVAUK I P B E M 


KEH Z A 
H 0 B W E 
AV DU Z 
F 0 F E T 
E M C 0 Z 


E GB L 0 
D O F Y O E N C 0 A MAW EN MAW EN 


EX F 0 M EMC 0 Z ACF AH 
L 0 F I R 0 9 3 5 
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MEMORANDUM ON THE q, (PHI) TEST 


1. The student has seen how it is possible by ocular examination to determine whether 
or not a substitution cipher is monoalphabetic. This tentative determination is based on 
the presence of a marked crest and trough appearance in the uniliteral frequency distribu- 
tion, and also on the number of blanks in the distnoution. Hence,, the absence of marked 
crests and troughs· in the uniliteral frequehcy distribution indicates that two or more cipher 
alphabets are involved: the :Battened-out appearance of the distribution constitutes one of 
the tests for a polyalphabetic substitution cipher. However, when the distribution contains 
a . small number of elements, ocular examination and evaluation becomes increasingly 
difficult and hazy. Now, the student may ask, does a mathematical test exist that could 
determine the monoalphabeticity or non-monoalphabeticity of a distribution? 


2. Without going into the theory of probabilities at this time, or into the derivation of 


the formulas involved, let it suffice for the present to state that there is such a test, known 
as the "q, (phi) test." With this test, the "observed value of q,'; is compared with the "ex- 
pected value of q, random" and the "exi>ected value of q, plain." The formulas are E(t?r) = 
.0385N(N-1) and E(q,p)=.0667N(N-1), where N is the total number of elements in the 
d.istribution. The use of these formulas is best illustrated by an example. 


3. The following short cryptogram with its accompanying uniliteral frequency distribu- 
tion is at hand: 


Q-C Y C H AD SK S Y Z Z Q E CY KY K Q ZYSK 
L S Z A C T K F C X L K L K C E S Z M X K I S Z X 


:::::: 


::::: 
~-:::::- 
-- 
~~- 
::;: 
~- 
::::;~~ N = 50 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
. 
' 
The ob8erved value of q, is calculated by applying the formula f(f-1) to the frequency (f) of 
each letter and totaling the result. Thus, 


N 
=- 
2 
6121 
11 
831 
3 
61 
356 
=50 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
f (f-1) = 
2 
30 0 2 0 
0 0 
56 6 0 
6 
30 0 
6 20 30 
=188 


The expected value of q, random is 


E(~) =.0385N(N-l) =.0385 x 50 x 49=94.3 


The expected value of q, plain is 


E(f/>p) =.0667N(N-l) =.0667 x 50 x 49=163.4 


Now since the observed value of q,, 188, is equal to and in fact greater than E(q,p), then we 
have a mathematical corroboration of the hypothesis that the cryptogram is monoalphabetic. 
If ·the observed value of q, were nearer to E(t?r), then the assumption would be that the 
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cryptogram is non-monoalphabetie. If the observed value were just half-way between 
E(q,..) and E(lf>i,), then decision would have to be suspended as there is no further statistical 
proof in the matter. 


4. Two further examples may be illustrated: 
-- 
-- 
--- :::::: :::: ~ :::::: 
-- 
~ ::::::: 
-- 
:;:: N =25 
a. 
A B c D E F G H I J K L M N 0 p Q R s T u v w' x y z 
0 
' 0 2 6 12 2 
0 
12 2 
0 
0 
6 f (f-1) =42 


----~------~---- 
--~ ---- 
----~~N=~ 
b. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


0 
0 0 2 0 0 0 6 0 0 
0 2 
0 0 
0 0 2 6 f (f-1) = 18 


Since both distributions have 25 elem~ts, then for both 


E(q,.) =.0385x25x24=21 · 
E(lf>i.)=.0667x25x24=40 


Hence distribution a is monoalphabetic, while b is not. 


5. The student must not assume that statistical tests in cryptanalysis are infallible or 
absolute in themselves: statistical approaches serve only· as a means to the end, in guiding 
the analyst to the most probable fruitful sources of attack. To illustrate this point, if the q, 
test is taken on the plaintext letters of the phrase 


A QUICK BROWN FOX JUMPS OVER THE LAZY DOG 


N 
~ 
-... 
-... 
-- 
-- 
-- 
-- -- -- ...._ -- -- -- -- -- ...._ -- -- -- ...._ -- -- -- -- ...._ -.. -- -- -- -... -- -... =33 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


f(f-1) 
= 2 0 0 0 2 0 0 0 0 0 0 0 0 0 12 0 0 2 0 0 2 0 0 0 0 0 =20 


E(q,..) =40.7 
E(lf>i,) =70 


it will be noticed that the observed value of q, is exactly half of E(q,.), therefore "conclu- 
sively" proving that the above phrase could not possibly be plaintext in any language! The 
student should be able to understand the cause of this cryptographic 'phenomenon.' 
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MEMORANDUM ON TRAFFIC INTERCEPTS 


1. Before a military cryptanalyst can begin the analysis of an enemy cryptographic 
system, it is necessary for him to study the intercept material that is available to him, 
isolate the messages that have been enciphered by means of the cryptographic system to be 
studied, and to arrange the latter in a systematic order for analysis. This work, although 
apparently very simple, may require a great deal of time and eft'ort: 


2. Since, whenever practicable, two or more intercept stations are provided to copy 
traffic emanating from the stations of one enemy radio net, it is natural that there should 
be a certain amount of duplication in the work of the several stations. This is desirable 
since. it provides the cryptanalysts with two or more sets of the same messages so that when 
one intercept station fails to receive all the messages completely and correctly, because of 
set difficulties, local static, or poor operation, it is possible by studying the other sets to 
reconstruct accurately the entire traffic of the enemy net. 


3. In all intercept activities where operators are used for copying the traffic, one of the 
most likely errors to be found is caused by the human error in reception. For this reason 
cryptanalysts and their assistants should be familiar with the Morse telegraph alphabets 
and the most common errors of wire and radio transmission methods so as to be able to 
correct garbled groups when they occur. In this work reference is made to the table given 
on page 82 of TM 11-484 (Elementary Military Gryptography). 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
Military Cryptanalysis, Part I 


LESSON2 
Uniliteral substitution with standard 
cipher alphabets 


CREDIT 
3 
TEXT ASSIGNMENT 
Text, Section V; attached memorandum 
MATERIALS REQUIRED 
None 


SUGGESTIONS 
None 


EXERCISES 
Weight 
40 
1. a. Solve the following cryptogram: 


5 
10 
15 
20 
25 


A· 
JM Q VS Q Z XI F 
FM ZS L 
I Z ML Z 
CE ME B 


B 
F Q 0 ME MDXYQ O·Z CY Y 
X JM Z I 
V M Z I Y 


c 
0 Q W Y I 
DKYMV MZMNQ E Q KM X 
C C W Z B 


D 
C Y I X I 
CD Y Y X 
C B Z Q I 
F Z C Q N H W D 0 X 


E 
I CD J Q YPMMD YMVMZ MFSNQ E Q KM N 


F 
Q D NEW 0 JM AW 
I BE MD XNMYX Z CS MN 


G 
Y X CB U MQZME CV ID K cw z x z C C B Y X 


H 
CZ M Q Z 
B C Y I X 
I C D Y Y 
X C B Z Q FY X CD 
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5 
b. What is the specific key?· 


5 
c. Name two methods of solving ciphers of this type. 


2. Solve the following cryptograms: 


10 
a. Q H H Y t. Y D W Q J 
J M E F C 


10 
b. Y X S E D Y F S X U H W X U S 


5 
c. What are the specific keys? 


10 
3. a. In the solution of a substitution cipher by completing the plain com- 
ponent sequence involving reversed standard alphabets, what are the successive 
steps? 


5 
b. What is the first step one should take in attempting to solve an un- 
known cryptogram that is obviously a substitution cipher? 


5 
c. If this step is unsucceSsful and the cryptogram is obviously monoalpha- 
betic in character, what type of cipher alphabet may be assumed to have been 
used? 


5 
d. Why do monoalphabetic cryptograms involving standard cipher alpha- 
bets yield such a low degree of cryptographic security? · 


RKS1'RIC'f'EB 
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MEMORANDUM ON CRYPTANALYTIC PROCEDURE 


The following suggestions will promote systematization of procedure and logic in analy- 


sis. Experience has shown that time and labor can be saved by careful attention to these 
instructions. 


1. Most of the problems in this course are already laid out in worksheet form, to spare 
the student the clerical labor of copying out the text. However in those eases where work- 
sheets must be prepared, the. cipher text should be copied in ink on cross-section paper, 
one letter per cell. There should be a single space between letters or digraphs in mono- 
alpnabetic systems, and a single space between period lengths in polyalphabetic systems. 
In aperiodic systems groupings may be in five letters, unless the system lends a better 
alternative. At least three spaces between successive lines of cipher text is recommended 
in order to leave room for multiple assumptions. Line and column indicators are to be made 
for each cryptogram, to facilitate reference in the step-by-step commentary. Margins 
should be left on all sides for notes, etc. AU worksheets and notes should be submitted 
together upon the completion of a lesson. 


2. Enciphering alphabets, enciphering diagrams, etc., as well as all keywords and specific 


keys should be included in a solution. Keyword derivation from transposed sequences will 
also be shown. Whereas there should be a letter-for-letter decryptment under the cipher 
.text, the final plaintext version in word-lengths should correct any errors or garbles in the 
text. Nulls or indicators showing sentence separation, change of key, etc., may be enclosed 
in parentheses. 


3. If CODJ.pleting the plain component sequence yields no. solution, then uniliteral 
frequency distributions (or digraphic distributions, if a digraphic· system) should be made. 
Triliteral frequency distributions will enable the separation of vowels and consonants and 
furnish much additional valuable data. In a difficult ease triliterals may give the only 
clues to solution: this is especially true in foreign language cryptograms. If the problem 
entails the selection of proper generatriees in polyalphabetic ciphers, the use of alphabet 
strips will save much time. In polypartite systems, reduce the cryptogram to mono- 
literal terms wherever possible. 


4. Repetitions should be underscored in a manner facilitating their location and inter- 


pretation: colored pencils will be found useful. It is recommended that the frequencies of 
letters comprising the repetitions be inscribed over their respective letters. Likewise, the 
frequencies of the first 10 and last 10 letters should also be inscribed, as in many eases these 
positions lend themselves readily to attack. If the problem proves difficult, then it is best 


- 
to inscribe the frequencies over all the cipher letters of the text, in order better to visualize 
frequency-fXJ,tterns of words. 


5. Step-by-step analyses should accompany all problems: they should be brief and 


concise, yet at the same time specific. The steps should be jotted down as t1iey are made, 
and at the end they should be combined into a complete resume of the analysis. It is not 
necessary to be verbose, but all the steps which were taken to achieve solution should be 
specified, so that at any fUture date the solupon may be reconstructed following the exact 
manner in which it was first accomplished. Assumptions of words, etc., should be refetrecl 
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to with line and column indicators and couched in the proper cryptologic language or symbols. 
All keywords and specific keys, as well as the mechanics of the general system, should be 
stated at the end of the commentary. 


6. Violations of cryptographic security observed in the problem studied may be included 
at the close of the commentary. These violations may be stereotypic phraseology (especially 
in beginnings or endings of messages), related keywords, keywords of military nature, 
unnecessary punctuation, general wordiness, or any other practices. dangerous to crypto- 
graphic security which may be seized upon by the cryptanalyst as entering wedges in solution. 


-. 


RRS'f'RICTED 
2 


t 


l 


t 


REF ID:A56886 


RBS'f'RIC'f'BB 


EXTENSION COJJRSE OF THE ARMY SECURITY AGENCY 


LESSON ASSIGN"'ENT SHEET 


SUBCOURSE 20-6 
LESSONS 


CREDIT 
TEXT ASSIGNMENT 


· MATERIALS REQUIRED 


SUGGESTIONS 
EXERCISES 
Weight 


Military Crypt.analysis, Part I 
Uniliteral substitution with mixed cipher 
alphabets 
3 
Text, Section VI; attached memorandum 
Cross-section paper of ~ inch squares 
None 


20 
1. a. Construct a triliteral frequency distribution shoWing one prefix and 
one suffix of the cryptogram below. On the worksheet below indicate by under~ 
scoring in black all ·repetitions of three or more letters. Other significant details 
may be marked .. in different colors. 
· 


6 
b~ Prepare a condensed table of repetitions of digraphs and trigraphs 


appearing more than twice, and include all repetitions of longer polygraphs. 
· 


20 
2. a. Using the data' obtained in a and b above, complete the solution of the 


cryptogram. 


5 
10 
15 
20 
25 


A 
s·R I KN A _Q J I R NQAIP FTEAI 0 J I R I 


B 
JIPJG GA Q QA' JI RE J BB APR NVRNR 


c 
PHKST NREFH Q SI A 0 LS A I H NHAEY 


D 
X JI R J BJTNK HSNJF QQSJK JI R KN 


E 
AQJIR NQSHS R Q'S i H SB J TN SL EAU 


F 
A QA JI A QA I U AP A I A S X J BY FTRGJ 


G 
TISHA I G JU A I 0 V R Q SSJHS SHPDJ 


H 
TNKJQ AS A JI QVRQS JBBHN NRFFQ 


J 
NAE OR Q SJ KP JIB AN GHSAJ I J B S L 


K 
AQNRK JN SA Q N R II T R QSREX 
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2 
b. Determine the cipher alphabet and the keyword used. What is the 


10 


10 


specific key (Ap=0c)? 


3. Using the same component.s as determined in 2b, solve the following 
cryptograms and indicate the specific keys: 
. 


a. 
F P F E N I Y R U E P W S F X F W V X K D F G Y P 
A L C A S K N V A L W E Y X P L P C J N Y U X H R 
KP F W X 


ABC DE~ G HI J KL M ~ 0 P QR-STU V W X Y Z 


q, = 144 
E(q,p) = 198 
E(q,.) = 114 


b. 
E P S S P A 0 E 0 A D K T P U U X M N J 
---- 
- 
-- -- 
-- -- 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


ct>=16 
E(cf>p) =25 
E(q,.) =15 


2 
4. a. What two places in every message lend thelll$elves more readily to 


sucCessful attack by the assumption of words than do any other places? Why? 


2 
b. What is meant by the "probable word method" of solution? 


2 
5. a. What is meant by the word pattern "A B C B A D B"? 


2 
2 
2 


5 


b. For each pattern given below, indicate one good English word that 
contains the pattern: 


(1) A ·B C B A D B 
(2) A A B A 
(3) A B C D A 


6. The following cryptograms, enciphered with random cipher alphabet.s, 
are in bona fide word-lengths. Solve them. 


a. 
H Y A R V J Z G H A R 0 T V K C G K M M G K H Z M L K U G 
-L KU G 0 R 0 E H 0 Z EN VHF SR M JR 0 T 
JEHZPUHGVEGM RO MCJKKSJKUME 


RBS~Rie'f'Ef) 
2 


- 


t 


5 


REF ID:A56886 


RBS'f'RICT:!D 


b. 


RGRQRU TDSPYURDP ZFTAVDRC AYCFO 
JO DRZYUUFSPPFUZR.TFADYGP 


.7. In solving several unrelated monoalphabetic cryptograms the following 
cipher ·alphabet.a were reconstructed. Recover all keywords in each case. To 
expedite solution, significant segment.a have J;>een underlined. 


2 
a. 


P: A 8 C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
C: N L 1f P F R T H S Y D Q A K V E 8 M X G C 0 Z Ll.J! 


2 
b. 
P: A 8 C D E F G H I J K L II N 0 P Q R S T U V W X Y Z 
C: Z Q X P E 0 N M W ·k.!Ll H G F D B V Y U T R I C S A 


2 
c. 
P: A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
C: P Q E R V II 0 Z W U T H A- X LQ_Q F S Y G I J K L N 
2 
d. 
' 


2 


P: A B C D E F G H I J -K L M N 0 P Q R S T U V W X Y Z 
C:· A U Z J T X H S W G R M B N 0 C I ~ 
K Y P D V L 


e. 
~ABCDEFGHIJKLMNOPQRSTUVWXYZ 
C: C K V E .B O_! fJLf~ G Q H S I T L W N J U R A M X 


3 
RKSTRIO'f'BB 
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MEMORANDUM ON ALPHABET RECONSTRUCTION 
AND KEYWORD DERIVATION 


1. Concurrent with the solution of a cryptogram, there should be a simultaneous effort 
in the reconstruction of the general system and recovery of the specific keys. Much labor 
can thus be saved as recovery of the keys early in the stages of solution transforms the 
process of decrypting into one of decryptographing. 


2. A cipher alphabet consists of two sequences, e:g., 


a. the plain component is a standard alphabet, cipher component mixed; 
b. the cipher component is a standard alphabet, plain component mixed; 
c. both components are the same mixed sequence; 
d. both components are the same mixed sequence, running in reverse; or 
e. the comp<>nents are differently mixed sequences. 


3. Let us examine several types of mixed sequences, using the keyword HYDRAULIC as 
an example: 


4 9 3 7 1 8 6 5 2 
H Y D R A U L I C 
BEFGJKMNO 
PQSTVWXZ 


The ordinary keyword-mixed sequence derived from the above will be: 


a~ H Y D R A U L I C B E F G J K M N 0 P Q S T V W X Z 


The two principal transposition-mixetl types will read: 
. 
. 


b. H B P Y E Q D F S R G T A J V U K W L M X I N Z C 0 
and 


c. A J V C 0 D F S H B P I N Z L M X R G T U K. W Y E Q 


Other types may arise from route transpositions as follows: 


d. H B P Q .. E Y D F S T G R A J V WK U L M X Z N I C 0 


~ HYBPEDRFQBGAUJTVKLIMWXNCOZ 
f 
P B Q H E S Y F T D G V R J W A K X U M Z L N I 0 C 


~HYDRAULICONMKJGFEBPQSTVWXZ 


~ OCILUARDYHBPQST~WXZNMKJGFE 


i 
HYE B.P Q ST G FDR AUK JV W X ZN ML IC 0 


j. ' C P I 0 Q B L N S E H U M Z T F Y A K X V G D R J W 
etc. 


Any transposition system may be employed to produce a systematically-mixed sequence: 


. practicability of method is the only determining factor. It must be remembered that the 


greatest amount· of systematic mixing will produce a sequence inherently no more secure 
than a random alphabet. 
· 
· 


1 
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4. The student would do well to construct both enciphering and deciphering versions 
of cipher alp~abets recovered. For example, in the following case 


Plain: 
J Q N M F H L E B R S K G Y Z 0 T I C D U V A W P X 
Cipher: A B C D E F G H I J K L M N 0 P Q R S 'I' U V W X Y Z 
no semblance of a key is apparent; but in the inverse form 


Plain: 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher: W I S T H E M· F R A L G D C P Y B ·J K Q U V X Z N 0 


the key-phrase "NOW IS THE TIME FOR ALL GOOD MEN TO COME TO THE AID 
OF THEIR PARTY" is quite clear. In other types of mixed sequences, first the one form 
is attacked, and then if negative results are obtained the inverse form is treated. 


5. Let us consider the following cipher alphabet: 


P: A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
C: D W Z M S 0 C R Y A T X B E F U G Q H I V J K L N P 


The section V W X seems to be superimposed parts of the non-keyword portions of mixed 
JKL 
sequences. Adding Y Z to the plain component, we get V W X Y Z which is certainly con- 
J KL NP 


sistent as far as alphabetical progression goes, and indicates that the letters M and 0 are 
present in the keyword of the cipher component. Continuing in this vein, the section 
M N 0 Q S T V W X Y Z is rapidly established by correlating both sequences. It is obvious 
BEFGHIJKLNP 
that the plain component keyword begins right after the Z, and that the cipher component 
keyword probably just precedes the B. Going to the right, Z R H suggests keywords like 


PQR 
RHOMBOID, RHEUMATISM, etc. These trials are quickly repudiated; therefore we 
go on to Z R E which is acceptable. Z R E K is found wanting, but Z R E P is very sat- 
P Q S 
PQST 
PQSU 


isfactory, and this is soon expanded to Z RE P U B t· '.!'. C, and in a moment or two we 


PQSUVWXYZ 


recover the complete cipher alphabet: 


P: R E P U B L I C A N D F G H J K M N 0 Q S T V W X Y Z 
C: QSUVWXYZDEMOCRATBEFGHIJKLNP 


6. In the example below the student will observe that the· alphabets are reciprocal: 
this is an indication of identical sequences at a shift of 18, or that a mixed sequence running 
against itself in reverse has been employed. In this case the W X Y Z points to the latter 
hypothesis. 
z y x w 


P: A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
C: H 0 J F T D N A K C I M L G B S U V P E Q R Z Y X W 


Starting with the V W X Y Z R cluster, we see that the keyword begins with the letter R; 
RZYXWV 
therefore the next letter should be a vowel. Z R A is not acceptable, but Z R E is :fine, show- 
W V H 
WVT 


RK8TRIGTIH> 
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ing that the letter U appears in the keyword.· Continuing the same line of reasoning as in 
the preceding example, and with a· little further experimentation, the final alphabet is 


- discovered to be 


- P: R E P U B L I C A N D F G H J K II 0 Q S T V W X Y Z 
C: VT SQ 0 II K J'H G FD NA CI LB UP ERZ Y X W 


7. In the next example, all efforts to derive keywords on the basis of keyword-mixed 


sequences are fruitless: the conclusion is therefore drawn that this is a case of a transposition. 


P: A B C D E F G H I J. K ~L II N . 0 P Q R S T U V W X Y Z 
C: A_ C S E J Y I G W L F V II H X N K Z P B Q R D U T 0 


Considering the mechanics o( the cryptography involved, and assuming for the time being 
that Z is at the bottom of the matrix and not in the keyword, we start with the letters to 
the left, or if this fails, to the right of Z in the ciphet' component, obtaining the column N 
K 
z 
which is not incompatible if N_ is in the keyword on the top row. If we place Y to the left 
of Z and build up its eolumn, we get E N which is certainly excellent. 
This is expanded 
JK 
YZ 
into I II E N which quickly becomes 7 1 8 4 3 5 2 6 9. This last example was very 
GHJK 
PARLillENT 
WXYZ 
BCDFGHJKO 
QSUVWXYZ 
.easy because none Of the letters V W X Y Z appeared in the keyword; but other cases should 
hardly prove more difficult. 


8. Two additional methods that have been encountered for deriving mixed· sequences 
may be_ mentioned. One is a slight modification of the preceding paragraph, when the 
keyword ~tains repeated letters; viz: 
187349526 
COii. IT ._E·. 
A B p F G · H J K L 
which produces the mixed sequence 
N P Q R S U V W X 
yz 
CANYEKIFRIGSJVLX.llDQ-OBPZTHU 


The other method is the interrupted-key columnar transposition system, viz: 


213546 
JANURY 
B C) 


. D) 
E F G) 
which produces the mixed sequence 
H I K L II) 
O P Q S) 
TV IX Z -) 


A C F I P V J B D E H 0 T N G K Q W R M. Z U L S X Y 


3 
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The first example will succumb to the treatment outlined in paragraph 7, whereas the 
second method is vulnerable owing to the presence of the fragment.s E H 0 T, F I P V and 
G K Q W in the sequence which may be anagrammed. Note the fragment a D E H 0 T, 
composed of an ascending sequence of letters: this is an outward indication of the interrupted- 
key columnar method. 
· 


9. There are still other methods used for the production of mixed sequences, but space 
does not permit giving further examples. However the student should by this time be able 
to devise methods of attack for any special cases that may present themselves, based upon 
the weaknesses or peculiarities inherent in the system of cryptography involved. 


RBSTRIGTBB 
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. EXTENSION COURSE OF THE ARMY. SECURITY AGENCY 


LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
LESSON4 


CREDIT 
TEXT ASSIGNMENT 
MATERIAl.S.REQUIRED 
SUGGESTIONS 
EXERC~ 
Weight 
20: 
1. Solve.and recover·all keys: 


5 


Military Cryptanalysis, Part I 
Polyliteral substitution with mon~uiv­ 
alent cipher alphabet.a 
3 
Text, Section VII; attached memorandum 
Cross-section paper of * inch squares 
None 


10 
15 


A 
,D'l' ,,LR. WE 
OE 
OE 
WH 
RR 
WR 
LA 
1H 
WA 
DE 
DA 
WR 
LE 


,B 
.. LE .. OR 
RE 
llT 
OR 
WA 
OH 
WH .OR 
LE 
LR 
WA 
RR. RR 
1H 


D 
·. , OE 
LR · OA . QA 
OE 
LR 
OR 
RE 
OA 
OA 
1H 
WT 
WH 
WA 
WA 


E 
.. WR 
WA .· _,IH 
DE ._,n' . OE 
IH IH RE 
OR 
OA 
RT 
OE 
LR 
OR 


G 
.LR 
LR 
WA. WH 
OA 
DE 
LR 
.LT 
LT 
LR 
OA 
WR 
DE 
WR 
LR 


H 
WA 
OA 
LR 
RA 
RA 
LR 
WE 
OE 
DE 
RT 
OE 
WH 
RR 
·WR 
LA. 


lC 
OE 
OH 
WH 
RE 
OT 
DT 
OR 
RE 
RE 
WR 
DE 
WR 
LR 
WA 
OR 


L 
LE 
OR 
OE 
DE 
WR 
LE 
t,.E 
IH 
OE 
DT 
OA 
WE 
LT 
LT 
LR 


N 
WA 
WA 
WR 
WA 
RR 


.1 
RB 8TRI O'l'RB 


------- ---- 
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A- E H R T 


3 12 - 
- 
3 


2 13 - 
21 5 


10 14 6 10 3 
3 
7 - 
5 3 


22 4 22 13 2 


4>=2288 
E(4>r) =1362 
E(cp.,) =2270 · 
(25-element alphabet) 


20 
2. This message was sent by the Fifteenth Infantry. Solve it and recover 
all keys: 
5 
10 
15 


A 
CY 
AO 
NX 
CN 
NO 
CN 
AO 
AO 
OG 
ON 
NG 
BY ox ox 
RO 


B 
CG 
NY 
RO 
AN 
RE 
AG 
RO ox 
AO 
AN 
AX 
AX 
AG 
AN 
AG 


c 
CN 
RO ox ox 
BY 
AN 
AG 
CN 
BE ex 
BN 
BX 
CG 
RO 
ON 


D 
co 
RE 
CN 
AY 
BG 
CE 
ON 
NO 
AO 
OG 
RO 
NO 
NO 
RO 
RE 


) 
-.-! 


E 
00 
NG 
BY ox ox 
RY 
AG 
AX 
BY 
AN 
OG 
CN 
AO 
OY 
OG 


F 
NO ox 
CY 
NX 
OG 
AO 
AN 
CN 
AG 
RE 
AG 
BY 
OG 
NO 
AO 


G 
BO 
AO 
CN 
CG 
AG 
CN 
ON 
BO 
CN 
AO 
OY 
CO . OE 
ON 
NO 


H 
AO 
OG 
RO 
NO 
NG 
RO 
NO 
AG 
CN 
RE 
AO ox 
RX 
AE 
BY 


J 
AN 
BO 


E G N 0 x y 


1 9 
12 3 l 
3 1 6 
l 
2 1 2 
9 2 1 
1 9 2 
9 1 1 


4>=716 
E(4>r) =410 
E(f/>p) =960 (approL) 
(36-element alphabet) 


RK 8TR:l 6TSB 
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6. The following is a ten in the Baudot teletype code enciphered by a simple machine 
employing five two-position switches which operate polarized relays. Each switcb has the 


· function of changing the polarity of it.s respective baud (a single "mark" or "space" impulse), 
if the switch is in the 'active' position. If the switch is in the 'inactive' position, the polarity 
of the baud is unafiected. The switch settings remain constant for each message. AP. an 
example, if switches 1 and 4 are active (*), and 2, 3 and 5 are inactive (-), then the word 
ENEMY is enciphered thus: 


Key: 
*-*- *-*- *-*- *-*- *-*- 
Plain: 
JISSSS 
SSJIMS 
MSSSS 
SSfllllM 
llSMSM 


Cipher: SSSMS 
MSMSS 
SSSMS 
MSllSM 
SSMMM 


It is suspected that the same signature is in the text as was present in Problem 2. Solve 
the message and recover the switch settings. 


1 
2 
3 
4 
5 
6 
7 
8 
9 
10 


A MSMSS 
MSMMS 
MSSSU 
IBISMM 
MllllNS 
M.SSSll 
SMMllS 
SMSSS 
SSSSS 
SMSMS 


D llMMSS 
MMMSS 
SSllSM 
MMMMM 
SSSSS 
MSSSll 
SSSMM 
MMSSM 
MYMMM 
SSMSM 


E 
MSSSM 
MSYMS 
MSSMM 
MSSSM 
MSSMM 
SSMSM 
SlilMSS 
MSMSS 
MSMMS 
MSSMM 


F MSSSM 
SMMMS 
SMSMM 
MMSSM 
SMMSS 
MMSSS 
Sl8ISM 
SMSSM 
MSMMS 
SSSSS 


G MMMSS 
MSSMS 
SMSMS 
MMMSM 
MMMSM 
MSSSM 
MSSSM 
SMMSM 
MSMSS 
SMMSS 


H SMMSM 
MSMSS 
SSMSM 
MMMMM 
MSSSM 
MMSMM 
MSIBIS 
MMMSS 
MSSSM 
SWMS 


.J 
SMSSS 
MSMSS 
SMSMS 
MSSSM 
MMSSM 
MSSMM 
SSSMM 


MMMMSS SS 
MMSSMY SS 
MSMSMS MS 
514431 6 1 
1 5 - 
8 4 l 13 1 
-34313 1 2 
2-5-2- - 
3 


E(q,.) =234 
E(~) =480 (approL) 
(32-element alphabet) 
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MEMORANDUM ON THE BAUDOT TELETYPE CODE 


Teletypewriters employ in their operation a fixed-length five-element code similar to 
the Baconian quinqueliteral cipher. Each character in the code consists of five "mark" 
or "space" impulses in the 32 possible pen;nutations. However, to allow for a greater num- 
ber of characters than 32, a "Fig." indicator changes to an upper alphabet and the "Ltr.'' 
indicator re-establishes the lower alphabet. The other process symbols, in addition to the 
space between words, are the CR (carriage return) which returns the carriage to the left- 
hand margin on the completion of a line; the LF (line feed) which feeds the paper, rolling 
the carriage to the next lower line; and the "Bell" which rings a bell to signal the operator 
at the receiving end that there is traffic ready to be transmitted. Below is a diagram of the 
normal Baudot code in international use; the black dots represent the holes in the teletype 
tape which are the "mark" impulses, while the "space" impulses are unperforated. 


'ml' I WEATHER SYMBOLS 
T $ 0/ 3- '\. l 8 .t' _, . ~ • • I 4 .0. 5 7 a> 2 I 
6 + -I< ii 
t;: t.: 
I COMMUNICATIONS 
- ? : $ 3 J •£ 8 • 
( , . ' 9 • 
I 4 .¢. 5 7 ; 2 I 
6 .. 11 < = ~ ii 
LOWER CASE 
A B C D E F G H I J K L M N 0 p Q R S T u v w x y z I "' "'l ~~ 
"'I.) ...i 


I •• •• • 
•• 
• • • •• •• 
•• 
2 • • 
• •• •• 
• • • 
•19 • 
• •• 
FEED HOLES 
0 
0 
0 
0 
0 0 0 
0 
0 0 
0 0 0 
0 
0 
0 0 0 0 0 
0 0 0 
0 
0 0 0 
0 
0 
0 
0 0 


3 
• • •• • • • • • • • • •• 
•• 
4 •• • •• • • ••• • 
• • 
• •• 
5 • 
•• 
•• • • • • • • 
~ •• 
•• 


The example below is a Baudot tape, containing the beginning of the phrase "NOW 


IS THE TIME FOR ALL GOOD MEN .... " 


• • 
• 
• • • 
• • 
• • 
• 
• ••• • 
• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • 
• •••• • • •• •• • 
• 
•• • 
•• 
• ••• 
•••• • • 
•• 
•• • • 
• 
•• ••• • 
NOW IS THE TIME FOR ALL GOOD MEN 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 


LESSON ASSIGNMENT SHEET 
SJ]BCOURSE 20-6 
Military Cryptanalysis, Part I 


LESSON 6 
Polyliteral substitution with poly-equiv- 
alent cipher alphabets 
CREDIT 
3 
TEXT ASSIGNMENT 
Text,Section VIII; attached memorandum 
MATERIALS REQUIRED 
Crose-section paper of X inch squares 
SUGGESTIONS 
None 


EXERCISES 
Weight 


6 
1. a. What is the purpose of providing variants in a cipher system? 
6 
b. From the cryptanalytic point of view, how does simple monoalphabetic 
substitution differ from monoalphabetic substitution with variants? 


20 
2. Solve and recover all keys: 
5 
10 
15 


A 
RA 
DE 
KE 
PE 
VE TI 
BO 
LA 
GO 
DU 
JO 
BE 
KI 
BI 
JO 


C· 
B 
BU 
JA 
VA 
ME 
LA 
BE 
KI 
RE 
FE 
DO 
VI 
JO 
SA 
DO 
JE 


+--· 
c 
KI 
BA 
MO 
SA cu 
GE 
GE 
PI 
BO 
KI 
JU 
CE 
CI 
MI 
NE 


D 
PO 
JU 
CE 
RE 
NA 
BU 
BE 
KO 
RA 
DE 
KE 
TE 
SE TI 
JO 


E 
FA 
GO 
DU 
DO, JE KI 
DI 
JO 
BU 
JA 
CE 
BO 
FO 
BA 
BU 


+-- 
F 
DA 
LE 
JO 
NI 
DO 
NA 
BO 
BE 
PI GI 
ME 
TE co JO TI 


G 
SA 
BO 
TI 
DU 
MO 
FA 
BU 
NA 
DU 
DE 
TO 
GI 
BE 
SE 
BU 


---i> 


H 
GE co 
PA 
TA 
KE 
CE 
NA 
VA 
MO 
LO 
ME 
NA 
DU 
DE 
CE 


J 
BO 
FO 
DA 
DU 
DA 
LE 
BO 
SI JO 
VA 
DO 
DE. TI 
NI 
DO 


K 
co FI DE 
VE 
CI 
BU 
DA 
LE 
BO 
VI 
DO 
NA 
JO 
BE 
KI 


L 
VA 
DU 
DE 
KO 
GO 
RE 
MO, PE 
SA 
RA JE 
KA 
DO 
PI RI 


( 
1 
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3. Solve 'and recover all keys: 


5 
10 
15 


A 
DR 
DD 
SY 
DA 
RA 
RR 
SB 
YA 
BT 
TY 
AR 
HI 
DB 
TB 
AD 


B 
yy 
YB 
SA 
AA HI 
DA 
TD 
HR 
YB 
TD 
RB RI 
AI 
HH 
BT 


c 
DD 
IA 
AI 
BB 
HA 
YD 
TH 
YA 
HI 
BA 
YT 
YD 
yy BO 
YH 


D 
SD 
DI 
SB 
AA 
ST 
YD 
RH 
SD 
SR 
YR 
OT 
SR 
RA 
RR 
YB 


E 
SA 
BT 
TY 
HR 
AI 
DB 
IB 
AD 
DY 
YB 
SA 
HA 
HI 
DA 
TD 


F 
TS 
DB 
SH 
YH 
DI 
SD 
TT 
TT 
yy 
HH 
ST 
YI 
SB 
AA 
ST 


G 
DD 
AH 
DH 
YT 
RH 
HI 
ID 
AR 
SB 
BA RI 
HB 
AI 
HI 
RH 


H 
DB 
SH 
HA RI 
DA 
AI 
IB 
YB 
DI SI 
DD 
YA 
BB 
YT 
HH 


\ 


J 
II YH 
TY 
BS 
DD 
YR 
SR RI 
HH 
TD 
OT 
TA 
AI 
RY 
ST 
_) 


K 
SH 
DH 
AB 
AI 
TI 
YT 
AH 
HY 
AR 
AI 
RH 
DI 
YD 
DD 
YA 


L 
TB . OT 
HH 
SB 
AA 
OT 
DD 
RH 
YD 
DR 
YB 
DH 
SH 
SR 
oo· 


M 
DA SI RI 
ID 
ST 
BO SI so TT 
BH 
SH RI 
AA 
HI 
BB 


N 
IS BI HI 
RH 
AY 
DB 
BA 
AI 
DH 
SH 


l 
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25 
5. This message is suspected of having an ending similar to Problem 4. Solve 
it and recover all keys: 


5 
10 
15 


A 
22 
08 71 
29 19 83 05 34 76 58 05 56 62 26 22 


B 
35 48 75 13 78 58 34 65 
02 
07 71 
51 
87 35 96 
[ 
j 


fi 


c 
10 32 69 45 47 81 46 
11 
01 
14 67 37 75 79 35 


+--- 


D 
30 53 29 37 46 60 
19 30 94 66 49 68 88 57 98 


E 
84 93 30 86 28 90 
51 
04 53 03 84 76 58 31 
57 


F 
42 
12 86 49 36 79 
54 28 
09 38 24 41 
86 63 79 


G 
08 28 67 68 66 94 22 63 71 
66 83 56 05 
07 58 


H 
95 
60 
19 62 
26 48 
23 
59 40 
38 15 67 43 92 42 
:~ 


J 
62 77 43 79 
54 69 38 65 
16 82 10 96 67 97 57 


+--- 


K 
:48 
93 
24 13 
53 
29 46 37 32 65 
12 94 84 95 68 


L 
83 
93 
98 37 75 79 45 
12 97 84 53 03 75 76 95 


M 
31 
29 32 
21 
49 17 25 73 
00 
69 86 36 79 45 
19 


N 
77 98 38 95 97 93 94 98 72 42 59 00 
08 
50 44 


p 
27 26 62 
57 06 
91 
23 


' 


RES'f'RI G'f'SB 
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FREQUENCY 'DISTRIBUTIONS 


A EI 0 U 


B26187 
C-5231 
046187 
F2112- 
G-323- 
J 23-92 
Kl362- 
L23-l- 
M--314- 
N612-- 
Pl231- 
R331-- 
S421-- 
Tl251·- 
V422-- 


Problem 2 


0 1 2 3 4 5 6 7 8 9 


0 1 1 3 - 
4 1 6 2 1 - 
1713146--61 
263---24-31 
3 7 10 2 - 
3 4 4 1 - 
- 
411-311-6-1 
52132-2273- 
6 1 - - - 4 - 
2 1 5 4 
7 2.14-1---5- 
8 1 2 6 - 2 1 4 3 3 - 
9926-1-11-3 


Problem 4 


5 


ABDHIRSTY 
A512293--l 
B33211-13- 
D558442-41 
H 3 1 - 
5 8 2 - 
- 
l· 


I 1 3 1 - 
1 - 
1 - 
- 
R21-662 .... -l 
s 3 5 ·4 6 3 4 - 
5 1 
Tl24ll-133 
Y465312-43 


Problem 3 


0 1 2 3 4 5 6 7 8 9 


0 2112131231 
1 21321111-4 
2-132213134 
3 323-23244- 
41132133133 
5 1 2 - 4 2 - 2 4 4 2 
6 2-42-33433 
7-311-43216 
8-1134-411- 
9 1 1 1 4 4 4 2 3 4 - 


Problem 5 


RESTRHJTED 


l 


t 
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MEMORANDUM ON STEREOTYPIC BEGINNINGS AND ENDINGS 


Within the confines of the ~mparatively limited scope of military messages, stereotypy 
of phraseology is inevitable. Particularly in the beginnings of messages is this limitation 
apparent: thus these positions lend themselves most readily to attack by the cryptanalyst. 
The following list of stereotypes have a high frequency of positional occurrence, and there- 
fore are to be shunned by the cryptographer as conscientiously as they are looked for by 
the cryptanalyst. It is to be noted that a stereotypic initial word often may suggest a whole 
opening phrase. For example, if a message begins with the word HEAVY, then it is not 
too unlikely that the opening phrase is "HEAVY ARTILLERY (FIRE, BARRAGE) 
(FALLING, INTERDICTING) .... ,'' which might be expanded into "HEAVY ARTIL- 
LERY FIRE FALLING ON OUR POSITIONS (NORTH, EAST, SOUTH, WEST) OF ... " 


ACKNOWLEDGE 
ADVANCE 
ADVISE 
ARRIVE 
ATTACK 
ATTENTION 
CANCEL 
CITE 
COMMANDING (GENERAL) 


BEGINNINGS 


WCATION (OF) 
NUMBERS {1, 1st, 2, 2nd, etc.) 
ORDERS 
OUR 
PARAPHRASE 
PLEASE 
. 


POSITION 
PREPARE 


COMMUNICATION 
(OFFICER) 
PROCEED 
RECEIPT 
RECEIVE 
CONCENTRATE 
CONFIRM 
CONTINUE; 
DEPART (-URE) 
DISCONTINUE 
ENEMY 
EQUIPMENT 
EXPEDITE 
FOLWWING 
FOR 
FROM 
HEAVY 
HOSTILE 
INFORM (-ATION) 
IN REPLY (TO) (YOUR) 


ACKNOWLEDGE 
ADVISE. (IMMEDIATELY) 
CONFIRM 
END 
END OF MESSAGE 
IMMEDIATELY 
NUMBERS (1, 1st, 2, 2nd, etc.) 


1-on 6, Military Ceyptanalysia, Part 1 (2M) 


RECOMMEND 
REFER (-RING) (TO) (YOUR) 
REFERENCE (YOUR) (MESSAGE, RADIO- 
GRAM, TELEGRAM) (NUMBER) 
REPEAT 
REPORT 
REQUEST 
REQUIRE 
RERAD 
REURAD 
SEND 
SUPPLY 
VERIFY 
YOUR (S) 


ENDINGS 


PERIOD 
REPLY 
REFERENCE 
REQUESTED 
SIGNED (NAME) 
STOP 
TITLES (MAJ, COL, ETC.). 


1 
JlK STRI CTKD 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 


LESSON ASSIGNMENT SHEET 


SUBCOURSE 20-6 
LESSON 6 


CREDIT 
TEXT ASSIGNMENT 


MATERIALS REQUIRED 
SUGGESTIONS 
EXERCISES 
Weight 


Military Cryptanalysis, Part I 
Polygraphic substitution systems: 4- 
square and 2-square matrices 
3 
Text, pars. 41-44, Section IX; attached 
memoranda 
Cross-section paper of '~ inch squares 
Review Section VIII, TM 11-485 


4 
1. a. What is polyliteral substitution? What is polygraphic substitution? 
4 
b. In true digraphic substitution, if REP yields QNc, is it possible for RNP 
to yield AZ.? 


2 
c. What is the fundamental purpose of polygraphic substitution'! 


10 
2. a. Construct a digraphic frequency distribution of the cryptogram below. 


20 
b. The following cryptogram is suspected to contain the word INFANTRY. 
Solve it and recover all keys: 


5 
10 
15 


A 
AF 
SM 
DH 
FG SP 
OS 
AB 
TU 
ZF 
OG 
TR 
UH 
IF 
PQ 
SO 
~ 


B 
RO 
MA 
CS 
KN 
SM 
KH 
TT 
UF 
HF 
UE 
QM 
OC 
NU 
DC 
EA 


C 
AM 
QM 
AF 
VD 
LK 
BT 
QU 
FC 
NI 
TT 
CG 
MT 
SA 
HH 
PU 


D 
ZR 
KU 
IW 
RH 
DS 
IM 
SW 
AC 
MT 
SP 
OS 
AB 
GN 
KP 
TD 


E 
TT 
TU 
IM II SN 
SA 
HH 
QM 
SH II PQ 
RH 
DS 
IM 
SW 


F 
YO 
CC 
UF 
QI 
TR 
MT 
SP 
OS 
AI 
KU 
KU 
IW 
SO 
RO 
MA 


G 
CS 
KN 
YO 
QA 
FC 
CS 
VS 
DH 
LS 
KS 
AC 
QT 
OQ 


1 
RE~TR:IG'FBD 
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20 
3. The enemy is suspected of using a 4-square matrix wherein the plain 


· components are mixed sequences and the cipher components are standard alpha- 
bets (I =J) inscribed in straight horizontals. Solve the following cryptogram and 
reconstruct the original matrix: 
5 
10 
15 


A 
DO 
GV 
XX 
HA 
TP 
PN 
DF 
OW 
FS 
YN 
DP 
YK 
DP 
YK 
WH -- 


B 
WL 
IA 
NF 
OB 
DE 
GV 
HX 
VC 
OP 
RY 
OP 
DQ 
RY 
WT 
DP -- 


C 
YK 
DP 
YK 
QZ 
FS 
IX 
GW 
DB 
AF 
HW 
NE 
VO 
YA 
LZ 
CW 


D 
TY 
DQ 
GN 
WN 
NS 
IH 
CA 
VI 
HH 
OF 
WZ 
YN 
WM 
WH 
OG 


E 
EV 
YN 
NL 
NK 
XI 
WH 
WL 
IA 
NF 
OB 
DE 
GV 
FS 
OF 
WH 


F 
NF 
OP 
DQ 
XO 
FA 
WN 
LQ 
DP 
YK 
BP 
IE 
DP 
YK 
SD 
NQ 


G 
DP 
YK 
TP 
PN 
VT 
TF 
BL 
MW 
CW 
IE 
TE 
FS 
CY 
OK 
YD 


H 
OM 
XE 
VT 
FS 
IX 
HB 
IH 
MP 
YN 
LZ 
YN 
NW 
GR 


20 
4. Solve the following cryptogram and reconstruct the enciphering matrix. 
It is suspected that this message probably has a stereotypic ending. 
5 
10 
15 


A 
NK 
KZ 
FQ 
KG 
QD 
RR 
RO 
NK 
MV 
TR 
KE 
HQ 
FZ 
QR 
PE 


B 
NK 
RD 
FW 
IV 
EF 
FF 
XT 
NB 
LZ 
NV 
EU 
RO 
PQ 
DA 
ML 
--+ 


C 
EU 
KV 
FF 
LL 
FM 
CF 
QP 
EI 
RC 
SO 
RS 
BC 
SD 
LN 
CD 


D 
IE 
HG 
TM 
VE 
FP 
QP SI 
KZ 
FW 
FP 
NB 
QR 
IZ 
IW 
EF 


E 
FF 
XT 
LW 
NX 
PD 
KK 
KV 
RD 
FP 
QR 
MX 
AR 
PZ 
FW 
ML -- 
. 


F 
EU 
IN 
FF 
LW 
NC 
LN 
CD 
QP SI KE 
FR 
HP 
ON 
IM 
HC 
-- 


G 
SM 
KZ 
IL 
FN 
FP 
LV 
LQ 
PD 
AS 
FK 


RES't'RIC't'ED 
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-,= 


- 
- 
REF ID :-A56886- 
- 


R:ESTRIC~Ef> 


20 
5. The following two messages were intercepted on the same circuit half an 
hour apart, message "B" being in answer to a request for a repeat. Solve the 
texts, and determine the cause of the cryptographic error involved: 


MESSAGE "A" 


5 
10 
15 


A 
DS 
ZM 
CM 
GI 
QM 
AB 
VG 
ED 
SU 
XI 
TO 
SQ 
OR 
NR 
SB 


B 
PN 
QO 
HN 
TB 
LL 
QN 
QS 
SI 
CR 
YU 
TQ cc 
KG 
AT 
FN 
+-- 


c 
YF 
VG 
ED 
CG 
NU 
MO 
LL 
NP so 
SB 
NP 
SQ 
OR 
NR 
SB 


D 
PN 
CM 
MB 
RP 
OG 
LL 
YX 
CM 
GI 
QM 
AB 
so 
NQ 
LZ 
LC 
~ 


E 
FD 
YR 
VI 
OR 
SB 


MESSAGE "B" 


5 
10 
15 
e 
A 
OY 
RU 
PU 
KV 
TU 
WO 
IW 
LL 
NR 
EV 
VD 
NB 
BZ 
YZ 
NO 


B 
AS 
TD 
HS 
VO 
DE 
TS 
TY 
NV 
PZ 
SR 
VB 
PM 
FW 
WQ 
XS 
~ 


c 
SK 
IW 
LL 
PW 
YR 
CD 
DE 
YC 
ND 
NO 
YC 
NB 
BZ 
YZ 
NO 


D 
AS 
PU co 
UC 
BW 
DE 
SF 
PU 
KV 
TU 
WO 
ND 
YB 
DI 
DM 


__.:....-- 


E 
XL sz 
IV 
BZ 
NO 


3 
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MEMORANDUM ON THE SOLUTION OF 2-SQUARE MATRICES 


1. If the student reviews paragraph 34 of TM 11-485, he will refresh his memory on 
the enciphering and deciphering processes of the two types of 2-square matrices. In the 
horizontal 2-square matrix illustrated in Fig. 36, the first member of the plaintext digraph 
comes from the same square as the second member of the cipher-text digraph, whereas the 
9 2p comes from the same square as the 9 1 •• Thus in the digram, THp=SD.;ANP=UO.;REP= 
ER.; MOP =OM.. 
However, the cryptography of the vertical 2-square matrix is analogous 
to that of the 4-square system, in that the 9 1p and the 9 1• come from the upper component, 
whereas the 9 2p and 9 2 • are found in the lower component. Thus in Fig. 38, COP= IA.; 
REp=IL 0 ; CAp=CA 0 ; Wip=WI •. 


2. The cryptographic idiosyncracies of 2-square matrices may be exploited by the 
analyst in attacking such systems. In the vertical 2-square, 203 of the possible 625 plain- 
text digraphs will be self-enciphered, such as CAP= CA. in the example. In the horizontal 
2-square, 203 of the 625 digraphs will be enciphered by themselves in reversed form, as in 
the example REP =ER.. Therefore if an examination of the cryptogram at hand discloses 
a goodly proportion of cipher digraphs which could well be plaintext digraphs, then one may 
assume that a vertical 2-square has been used. On the other hand, if a large number of 
cipher digraphs could be good plaintext digraphs if the positions of the letters were reversed, 
then the assumption would arise that the cryptogram was produced by a horizontal 2-square 
matrix. Sometimes skeletons of words or even whole phrases are self-evident in the text, 
affording an easy entering wedge into the problem. 


3. During the reconstruction of the squares of the matrix, the student should keep 
clear on his worksheets which letters are in the same row, and which are in the same column. 
It will be found expeditious to draw a dividing line (either horizontal or vertical, depending 
on the type of 2-square involved) on the page to keep the elements of the two squares in- 
dependent, recording the values which are in the same row or column, writing down the 
letters as they are assumed until enough values have been established to facilitate recon- 
struction of the matrix. In the early stages of this process the student must exercise care 
in recording the letters so that no false relationships are formed; in other words, the values 
should be written down so that they are not in the same row or column with any other 
letters than those with which they are known to be related. This will entail spreading the 
work rather widely over the page. 


1 
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DIGRAPHIC IDIOMORPHS: GENERAL 


AB AB 


-G EN ER AL AL AR M- 
NE ED ED 
-P RO CE ED ED 
-S UC CE ED ED 
-D ET RA IN IN G- 
-L IN IN G- 
-M IN ING- 


OB TA IN IN G- 
QU IN IN E- 
RA IN IN G- 


RE MA IN IN G- 
SH IN IN G- 


-T RA IN IN G- 


CR IS IS 
PO SI TI ON ON 


-A RE RE EN FO RC ED 
-A SU SU AL 
BO TH TH E- 
WI TH TH E- 
- P AR TI TI ON 
RE PE TI TI ON 


VI VI D- 


AB - 
AB 


-M AI NT AI N- 
RE AR GU AR D- 
CH UR CH 
DE CI DE 
DE CO DE 
DI VI DI NG 


SP EA RH EA D- 
-R ED UC ED 


-S CH ED UL ED 
-B EE NN EE DE D- 
EM BL EM 
AM EN DM EN T- 


CO NT EN TM EN T- 
-S EV EN TE EN 
-S EV EN TE EN TH 
EN TR EN CH 
ER AS ER 


1 


AB-AB 


TH ER EF ER EN CE 
TH ER ES ER VE 
WH ER EV ER 
-C AR EL ES SN ES S- 


GE OR GE 


SC HO OL HO US E~ 


-I LL UM IN AT IN G- 
IN CL IN E- 
-F IR IN GL IN E- 
MA IN TA IN 
-I NF AL LI BI LI TY 


-A ME ND ME NT 
SO ME TI ME 
-0 NE NI NE 


NO TK NO WN 
NO WK NO WN 
-A PP OI NT ME NT 
-C ON TE NT ME NT 
-C OM PR OM IS E- 
-P ON TO ON 


-T HR OU GH OU T- 
-N OW KN OW N- 
PH OS PH OR US 
PO ST PO NE 
TR 00 PS HI PS 


PA RA PH RA SE 
-P RE FE RE NC E- 
RE FE RE NC E- 
-T HE RE FO RE 
-P RE PA RE 
RE TI RE 
RE VE RE NT 
-C RO SS RO AD S- 


CA RE LE SS NE SS 


AT TE MP TE D- 


TH AT TH E- 
-F OR TH WI TH 
-I NV ES TI GA TI ON 
ES TI MA TI ON 


-D ES TI NA TI ON 


AC TI VI TI ES 
-H UM DR UM 


RES'FRIC'fEf> 
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BESTRICTEB 


AB--AB 


-P AN AM AC AN AL 
AR BI TR AR Y- 
AS SO ON AS 


AC CE PT AN CE 


EM PL AC EM EN T- 
-Q UA RT ER MA ST ER 
-I NT ER PR ET ER 
-A CC ES SO RI ES 


IN CL UD IN G- 


-D IR EC TF IR E- 
TO MO RR OW MO RN IN G- 
PA NA MA CA NA L- 
-I NT ER ME NT 
-I NT ER VE NT IO N- 
CO NT IN GE NT 
-C ON DI TI ON 


-T OM OR RO WM OR NI NG 
RA DI OG RA M- 
RE AS SU RE 


-P RE MA TU RE 
-D EF EN SI VE PO SI TI ON 


IN TE RD IC TE D- 


QU AR TE RM AS TE R- 
IN TE RP RE TE R- 
IN TE RR UP TE D- 


-F OR TI FI CA TI ON 


ItES'fIUC'fEB 
2 


AB---AB 


AR MO RE DC AR 
EN FO RC EM EN T- 
RE EN FO RC EM EN TS 


IN DE TE RM IN AT E- 
IN TE RE ST IN G- 
IN TE RF ER IN G- 
IN TE RV EN IN G- 
-I NC OM PE TE NC E- 
-C ON GR ES SI ON AL 
-D EM ON ST RA TI ON 
-C ON SU MP TI ON 


I 
PH OT OG RA PH 
TH IR TE EN TH 


AB----AB 


-I NS TA LL AT IO NS 
-C ON CE NT RA TI ON 
-C ON FL AG RA TI ON 
-C ON SI DE RA TI ON 


AB-ABAB 


/ 
IN CL IN INJG- 


MA IN TA IN INIG- 
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EXTENSION COURSE OF THE ARMY SECURITY AGENCY 
LESSON ASSIGNMENT SHEET 


SUBCOURSE 2o-6 
Military Cryptanalysis, Part I 


LESSON 7 
Polygraphic substitution systems: Play- 
fair cipher systems 


CREDIT 
3 
TEXT ASSIGNMENT 
Text, pars. 45-46, Section IX; attached 
memoranda 
MATERIALS REQUIRED 
Cross-section paper of X inch. squares 


SUGGESTIONS 
Review Section VIII, TM 11-485 
EXERCISES 
Weight 
35 
1. What are the characteristics of the normal Playfair cipher which make it 
recognizable? 


20 
2. Solve the following and recover the keyword: 


5 
10 
15 


A 
QO 
AP 
QO 
CM 
PQ 
BQ 
HO 
WE 
OB 
DQ 
WE 
LC 
FT 
OF 
TE 


B 
oc 
AO oc 
CK 
BX 
CM 
BV 
LF 
LX 
EX 
TW 
SD 
ND 
VL 
VR 
------ 
c 
FR xv 
AR 
VD 
LZ 
SB xv 
FW 
QV 
DL 
BK 
CM 
SB xv ws 


-~ 


D 
QO 
PA 
BQ 
TE oc 
FR 
BV 
VQ 
QV 
TL 
VQ ex 
LY 
FW ws 


----+ 


E 
QO 
PA 
BZ 
RF 
PV 
IV 
VD sz 
TW 
XE 
WE 
OB 
IR 
DC 
PV 


F 
vz 
SD 
ND 
MD 
FV 
ZD 
MH 
ZD 
VP 
BG 
MH 
DC 
VB 
RO 
CK 


G 
PA 
AP 
MS 
AO 
TW 
XE 
VD 
LZ 
VL 
ZR 
RZ 
LY 
OQ 
RZ 
QR 


H 
cs 
AR 
DC 
MA 
YM 
MS 
BX 
LP 
TK 
TK ow 


1 
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3. The following cryptogram is suspected to contain the word DIVISION. 


Solve it and recover the original enciphering square. 
5 
10 
15 


A 
MP 
QK 
KA sz 
QK 
KA 
HX 
EH 
LK 
YS 
ND 
TP 
CQ 
OL 
NP 


B 
RC 
AH 
LM 
SK 
ND 
YG 
QK 
DU 
RF 
QK 
EH 
LK 
YS 
ND 
TP 


c 
SA 
OE 
SY 
FR 
QP 
FE 
YS 
MO 
FD 
AF 
RJ 
RS 
DU 
RF 
RN 


D 
TP 
CQ 
UL 
LM 
SK 
ND 
UD 
FM 
JE 
HR 
VN 
QK 
UD 
EC 
LF 


E 
AK 
BH 
IY 
QV 
SM 
FO 
SY 
DY 


20 
4. a. Solve the following cryptogram and recover the original enciphering 
square. It is suspected that this message is signed "WINTHROP COL INF." 


5 
10 
15 
...-;...._-- 


A 
4L 65 
4L 
C3 1v 
PV 
7W 
xv zx Bl OS 
07 
L4 cw 
4K 


B 
OF 
RT 
4L 79 
OL 
HR 
YN 
MR 
RM 
DQ 
QV 
9R 
GM 
ex 
4K 


c 
QF 
4N 
4L 79 
OL 
HR 
OP 
E4 
NR 
QB 
4M 
XS 
WN 
¢E 
NU 


D 
GC 
QX 
4K ¢0 
51 
NP 
Z5 
4R L4 
VQ 
PF 
HN 
4L 79 
OL 


E 
HR 
EM ax 41 
ND 
AP 
Z.!. 
4N xc 
M4 
RT 
P6 
4M 
SH 
FZ 


------ 


F 
C3 
R9 
Q4 
CI 
2H xz 48 1¢ L4 
YN 
PQ 
LM 
HR 
T4 
PQ 


G 
BQ 
RM 
D3 


2 
b. What is the principal disadvantage of such a system for military 
purposes? 


RBS'TRIO'TEB 
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() 
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5. The following message was intercepted ·and solved by the cryptanalytic 
section at GHQ. . The plaintext was found to read: "DIVISION RESERVES 
HAVE REACHED CROSSROADS EIGHT NINE THREE DASH B." Re- 
construct the general system and show the specific key: 


G K A T J 
A H P 0 G F B R C Q R B I S X C G F L G 


KERED EKOBQ RHKUB RZGKE RIWKU 


KAKUG XKOHK EBFEL AKESX 


6. From the soluti9n of three Playfair ciphers, the following ·squares were 
derived. . Reconstruct the original squares and show the keywords. 


5 
a. YPTGV. 


5 


CFALZ 
Q l: U 0 B 
KXESN 
RMOHW 


b. 
Z Pt W L 
Q U G Y S 
ARHBC 
ID V KT 
MFXNO 


5 
c. 
W ZR TV 
0 PX y·L 
MUHNE 
A.BS IC 
K Q D F G 


3 
REl!ITIUGTEB 
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DIGRAPHIC F~QUENCY DISTRIBUTIONS 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


A --------------22-2-------- 
B ------1---1-----2----2-2-1 
c ----------2~3-----1----1-­ 
D --3--------1----1-----1--- 
E -----------------------1-- 
F -----------------2~1-12--- 
G -------------------------- 
H --------------1----------- 
I 
----------~------1---1---- 
J -------------------------- 
K -------------------------- 
L - 
- 1 - - - 1 - - -.- - - - - 1 - - - - - - - 1 2 2 
M 1--1---2----------2------- 
N ---2-------~-------------- 
0 -·23--1-----------1-------- 
p 
3---------------1----2---~ 
Q --------------4--1---2---- 
R -----1--------1----------2 
s -2-2---------------------1 
T ----2-----21----------3--- 
U -------------------------- 
V -1-3-------2---121-------1 
w ----3-------------2------- 
x ----2----------------3---- 
y ------------1--------~---­ 
z ---2-------------1-------- 


4 5 7 10 7 2 2 2 
5 4 4 
8 4 6 9 5 1 
11 6 5 2 7 


Problem 2 


R:BSTRIGTEB 
4 


6 
9 
7 
6 
1 
6 


1 
2 


8 
6 
2 
7 
6 
7 
.J 
4 
5 
8 


11 
5 
5 
1 
3 


I 


• 
----REF~-ID :-AS 6 BB-6 
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ABCDEFGHIJKLMNOPQRSTUVWXYZ 


A 
1 
1 
1 
3 


B 
1 
1 
c 
2 
2 
D 
2 
1 
3 


E 
1 
2 
3 


F 
1 1 
1 
1 
1 
5 
G 
H 
1 
1 
2 
I 
,... 
1 
1 
J 
1 
1 
K 2 
2 
L 
1 
2 
2 
5 


II 
1 1 
2 
N 
4 
1 
5 


0 
1 
1 
2 
p 
Q 
5 
1 
1 
7 
R 
1 
2 
1 
1 
l 
6 
s 1 
2 
1 
2 1 7 
T 
3 
3 


u 
2 
1 
3 


v 
1 
-. 
l 
(; 
w 
. . 
. 
x 
y 
1 
3 
4 
z 


3 
273414 
110 2 4 2 2 6 2 2 4 
2 1 
1 4 1 


Problem 3 


5 
RBSTRIO'f:EB 
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MEMORANDUM ON.PLAYFAIR KEYWORD DERIVATION 


1. Reconstruction of the square in Playfair ciphers takes place concurrently with the 
evolution. of the plaintext, once a few correct assumptions are made. However, the square 
that is derived may not necessarily be the original enciphering square: more than likely it 
will be one of the 24 possible cyclic permutations of the original square. If the Playfair 
consisted of a keyword-mixed sequence, a permutation of the square will cause no difficulty 
in recovering the original matrix and hence the keyword. For example, if the derived 
square is Q T L N 0 then the square P Y R A M 
X Z U V W 
I D S B C 
A.MP YR 
EFG HK 
B C I D S 
L N 0 Q T 
HKEFG 
UVWXZ 
is easily constructed because of the tell-tale letters U V W X Z occurring in a row. of the de- 
rivative square. But when the Playfair square consists of a transposition-mixed sequence, 
then a different procedure must be adopted. 
2. As an example, let us take the transposition matrix 
5 8 6 1 4 3 2 7 from which A F T D K is the original square. Using the methods illus- 
p Y R A M I D S 
W I H V M 
BCEFGHKL 
GUPBN 
NOQTUVWX 
ZREQS 
Z 
L X ·y C 0 


trated in a previotis memorandum ("Alphabet reconstruction and keyword derivation"), 
the columns I D S will afford rapid recovery of the keyword. But if instead of the original 
HKL 
vwx 


square we had one of its permutations such as Q S Z R E , then the columns F V 0 are 
COLXY 
TML 
DKAFT 
VWX 
V M W I H 
B NG UP 


without significance; therefore the procedure above is inapplicable without a slight modifica- 
tion. 
8. Since it will be noted that a permutation pf the rows will not affect the procedure of 
keyword recovery, then we construct a 9 x 5 rectangle Q S Z R E Q S · Z R which contains 
C 0 L X Y C 0 L X 
D K A F T D K A F 
VMWIHVMWI 
B N G U P B N G U 
the five squares of the successive perm~tations of the columns. ' A 5 x 5 cut-out square will 
be found convenient in testi:pg each permutation in turn. Affirmative results will be obtained 
when the correct permutation is reached, w:hich in this ca8e is the third square in the rectangle, 
namely 
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ZR E Q S 
L X Y CO· 
AFT DK 
WIHVM 
G U P. B N 


1 
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DIGRAPHIC IDIOMORPHS: PLA YFAIR 


SC AB BA RD 
AF FA BL E- 
AF FA IR 
-B AG GA GE 
-H AW AI IA N- 
AL LA RE AS 


-!3 AL LA ST 
-F AL LA CY 


IN ST AL LA TI ON S- 
-P AR AL LA X- 
AP PA RA TU S- 
AP PA RE L- 
AP PA RE NT 
AP PA RE NT LY 
AR RA NG E- 
AR RA Y- 
-B AR RA CK S- 
-B AR RA GE 
-E MB AR RA SX SE D- 
-N AR RA TI ON 


AS SA IL AN T- 
AS SA UL T- 
-A MB AS SA DO R- 
-I MP AS SA BL E- 
-M AS SA CR E- 
- P AS SA GE 
AT TA CH 
AT TA CK 
AT TA IN 
-B AT TA LI ON 
-R AT TA N- 


BO OB YT RA P- 
IN DE ED 
-W EB BE D- 
EF FE CT 
EF FE CT IV E- 


CO MP EL LE D- 
-E XC EL LE NC E- 
-E XC EL LE NT 
-E XP EL LE D- 
- I MP EL LE D- 
-P EL LE T- 
PR OP EL LE D- 
-R EP EL LE D- 


AB 
BA 


1 


SH EL LE D- 
-H EM ME DI N- 
ST EM ME D- 
ST EP PE D- 
AV ER RE D- 


CO NF ER RE D- 
-I NT ER RE D- 
-R EF ER RE D- 


ES SE NC E- 
ES SE NT IA L- 
AD DR ES SE S- 
-C OM PR ES SE D- 


CO NF ES SE D- 
IM PR ES SE D- 
-L ES SE N- 
-M ES SE NG ER 
PR ES SE D- 


PR OF ES SE D- 


-P RO GR ES SE D- 


-S TR ES SE D- 
-S TR ES SE S- 


-V ES SE L- 
WI TN ES SE S- 


AB ET TE D- 
-C IG AR ET TE S- 


-B ET TE R- 
-L ET TE R- 
-E IG HT TH RE E- 
-R IB BI NG 


FO RB ID DI NG 
-D IF FI CU LT 


. -B IL LI ON 


-F IL LI NG 
-K IL LI NG 
-M IL LI ME TE R- 
-M IL LI NG 
-M IL LI ON 
SH IL LI NG 
SP IL LI NG 
-T IL LI NG 
-W IL LI AM 
-W IL LI NG 
IM MI GR AN T- 
IM MI GR AT IO N- 


ftES'fftlC'f'Ef> 


RES'f'RIC'f'Ef> 


AB BA 


IM MI NE NT 
SW IM MI NG 
-BEG IN NI NG 
SP IN NI NG 
-W IN NI NG 
CL IP PI NG 
SH IP PI NG 


.:...s TR IP PI NG 
IR RI GA TI ON 


-M IS SI NG 
-M IS SI ON 


-A DM IS SI ON 


EM IS SI ON 
-H IS SI NG 
PE RM IS SI ON 


TR AN SM IS SI ON 


EM IT TI NG 
-F IT TI NG 
-S PL IT TI NG 
PE RM IT TI NG 


-A FT ER NO ON 
FO RE NO ON 
NO ON TI ME 
-F OL LO W- 
-H OL LO W- 
-C OM MO N- 
-C OM MO TI ON 
PO SI TI ON NO RT HO F- 
-R EC ON NO IT ER 


OP PO RT UN E- 
OP PO RT UN IT Y- 
OP PO SE 
OP PO SI TE 
OP PO SI TI ON 


-C OR RO BO RA TE 
-C OR RO DE 


-T OM OR RO W- 
-B OT TO M- 
-C OT TO N- 
CA RE ER 
-S UC CU MB ED 


ltES'f'RI 6TB9 
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AB - 
BA 


PR AC TI CA BL E- 
PR AC TI CA L- 
-T AC TI CA L- 
-D IV EB OM BE R- 
EN GI NE ER 
-G EN UI NE 
-I NT ER FE RE 
-I NT ER FE RE NC E- 
-P EN ET RA TE 
-R EV OL VE R- 
IN FI NI TE 
-D IS PO SI TI ON 
-S IT UA TI ON 
CA NA DI AN 


VE TE RI NA RI AN 
NI NE TE EN 
NI NE TE EN TH 
PE RC EP TI ON 


-P RE MI ER 
-S UR RE ND ER 
-0 UR SE LV ES 
TH EM SE LV ES 


DE SE RV ES 
RE SE RV ES 
SE RV ES 


• 


'' 


AB-·- BA 


DE BA RK ED 
DE CL AR µ> 
DE FE ND ED 
DE MA ND ED 
DE PA RT ED 
DE PL OY ED 
DE PO RT ED 
DE SE RT ED 
DE TA CH ED 
PR EC ED EN CE 


EM PL OY ME NT 
EN TR AI NE D- 
ME AS UR EM EN T- 
NE GL IG EN CE 
NO TA TI ON 
PA RA GR AP H- 
RE CE IV ER - 
RB CO RD ER 
REGISTER 
RE PE AT EJt 
RE PO .RT ER 
RE VO LV ER 


, -P RO JE CT OR 
AS SE MB LI F.s 
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ItESTlt:ICTED 


AB-.---BA 


DE SE CR AT ED 
DESIGN AT ED 
DE SP AT CH ED 
EN EM YP LA NE S- 
-0 ET ER IO RA TE 
-S EV EN TY FI VE 
IR RE GU LA RI TY 
Nb MI NA TI ON 
SU SP IC IO US 


AB----BA 


' 


DE MO NS TR AT EDI 
NO TI FI CA TI ON 


RK~TIUGTBB 


---------------................ .....-------"""""""'""""""'.....,_ _________ 
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LESSON 8 
Polygraphie substitution: quadrieular 
tables 
CREDIT 
3 
TEXT ASSIGNMENT 
Text, Section IX 


MATERIAIS REQUIRED 
Cross-section paper of X inch squares • 
SUGGESTIONS 
R~ew Section VII, TM 11-485 


EXERCISES 
Weight 
.. 
. 


30 
1. The following cryptogram is suspected to contain the word RECON- 


NAIS~NCE. Solve the text, and reconstruct the enciphering di8Fam: 


5 
10 
-15 
.. 
A 
SA 
CJ .JY _RO 
HT 
KP 
LP 
DO 
CV 
PS 
LN 
PE 
GN 
RP SP 


'B 
Fi>· LU 
QT 
LW 
PR 
CJ 
KL 
RN 
QE 
RO 
CV 
MF 
SE 
LZ 
QZ 


l/ 
c 
RR 
AO 
TH 
SQ 
PG 
TL 
GL 
NR 
QS uz 
KK 
KK JE 
MV 'NL 


'·D' 
_LU 
AR 
QE 
SA 
MW 
KK LP 
SL 
AP 
P"L 
QV 
KK 
PB 
CJ ·Jy 


·E. 
RL-. CJ -HA co 
AR 
BH 
LL 
JH QT RP 
AS 
SL 
RP SL 
NL 


F 
QJ 
QT 
AJ 
NL . IG 
NR 
WX . AI 
HI 
YD 
KK JE 
CP 
YO 
SP 


G 
KO 
FB 
QT 
QP 
YP 
NZ so 
AM 
DZ 
KR 
FP sx 
PK FJ 
PR 


H 
OE 
AK 
CE 
AS LP 
DO 
PB SI AX sx PB 
LP 
HT wx 
RF 


J 
GZ 
QT 
LW 
PR 
CJ JY 
AK 
HT 
JY 
AA 
NN sx 
CB 'RO 
WE 


K 
SA 
RD 
LL 
ML 
AX 
AF 
YU 
NC 
PK 
MS 
NE 
QJ 
QT 
AJ 


1 
RESTRIC'fEB 
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2. This cryptogram is suspected of having a beginning similar to that of 
Problem 1. Solve the text, and recon8truct t\le enciphering diagram: 


1 
2 
3 
4 
5 
6 
7 
8 
9 
10 


A 
003 
315 
097 
114 
347 
261 
067 
217 
314 
24;1. 


B 
195 
062 
350 
115 
006 
451 
062 
141 
072 
472 


c 
189 
192 
018 
400 
189 
067 
315 
097 
530 
403 


D 
115 
393 
262 
609 
192 
356 
115 
186 
122 
467 


E 
212 
071 . 074 
237 
235 
114 
416 
115 
393 
271 


F 
055 
293 
186 
552 
009 
062 
471 
141 
150 
193 


G 
186 
516 
184 
266 
274 
470 
002 
238 
053 
186 


H 
141 
072 
236 
516 
189 
004 
195 
191 
479 
067 


I 
J 
008 
3f1'/' 
080 
137 
105 
189 
391 
262. 
343 
408 


K 
133 
273 
071 
084 
274 
400 
361 
223 
403 
186 


L 
211 
524 
008 
292 
.011 
122 
393 
284 


It& 8TRI G'l'EB 
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RSSTRIGTJH> 


FREQUENCY DISTRIBUTIONS 


Problem 1 


01 
0 : 
A B C D E F G H I J KL M N 0 P Q R S T U V W X Y Z 
4>=1090 


E(f/>p) =1471 
E(ctir) =849 


\ 


, 


Problem 3 


0 1 • 
C• 


. el 
• 
O• 


01 
0 : 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
4>= 794 


E(t/>p);.., 1207 
E('t»r) -696 


RK8TRIGTJH> 
4 
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LESSON 9 
Miscellaneous monoalphabetic substitu- 
tion systems 
CREDIT 
3 
TEXT ASSIGNMENT 
Text, Section X 
MATERIALS REQUIRED 
Cross-section paper of X inch squares 


SUGGESTIONS 
Read appended Partial Analysis Sheets 
EXERCISES 
Weight 
2 
1. a. What characters are most used in practical cryptography today? 
2 
b. What is the usual preliminary procedure in solving cryptograms in-· 


volving symbols? 


4 
c. In monoalphabetic substitution with variants, what characters are 
most commonly used? Why? 


2 
2. What is the primary purpose of an analytical key? 


25 
3. Solve the following cryptogram, and recover all keys: 
5 
10 
15 
20 
25 


f_. 


A 
BU F WW HEAGH MI TAJ JS KL S 
MN HI U 


B 
YU QA I 
AUMQM U WI Z U 
V 0 J F H GUFMD 


c 
G Q Y K Q LL SU I 
Y KC GS WUFQU U Q KC F 


D 
I W H Q K 
0 G S W I 
y J y 0 y 
SK X F Q 
I A D Q B 


E 
Y K J Y S 
V C L L C SSH J W Y M J Y S 
X WY KB 


F 
JU K KU PT PW I 
I U Q H K 
X HY KB J Y C 0 F 


G 
Y Q EN V 
Q I C U Y BIRR W PI Y Y N PS W J E 


H 
P M I 0 P UQARH KY Y QC 
G WP GE 
P G A E L 


J 
S VT FE LT KB T DX VS X SR MY F 
Q X TS H 


K 
D TT DY C F X F Q HUS GT GU DX C HS BS 0 


L 
W L HQ Q N ·z HK F· JHKIU SW WAL HS IN W 


ll 
u Q Q w u SK Q SI UM HIT U I Z W H HPHWU 


(_, 
1 
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· 4. Below is an intercepted message which is suspected to begin with the 
words "FIFTH DIVISION." Solve it and recover all keys: 


6 7 2 6 7 
8 6 5 5 5 7 2 8 7 2 8 5 2 3 7 
7 2 8 5 7 


6 3 8 7 2 77684 7 8 2 7 7 
8 6 3 7 8 3 8 5 2 8 


6 2 3 7 7 
8 5 8 6 3 7 8 0 5 8 
8 6 2 5 9 
5 9 1 5 8 


5 ·6 6 6 0 5 8 5 8 0 
6 8 l 6 7 
0 5 9 5 9 
2 7 7 6 8 


5 9 3 8 8 


20 
5. This message below is suspected to contain the same plain text as Prob- 
lem 4. Reconstruct the general system and recover all keys: 


3 5 5 9 1 
5 9 2 2 8 
8 6 6 0 0 2 4 6 3 5 7 8 8 8 l 


77777 8 4 3 3 0 
l 0 4 3 5 5 5 3 9 9 6 6 6 l l 


2 9 8 7 2 
5 8 7 0 0 
2 9 3 8 8 
7 5 0 0 8 
0 7 1 0 6 


9 7 6 4 0 
0 2 3 0 0 3 l 8 5 8 
0 6 9 5 8 97442 


0 2 2 3 2 7 6 8 4 9 
9 1 3 0 0 1 4 0 9 0 6 8 6 7 8 


7 4 9 2 3 
0 0 1 0 2 4 4 0 9 2 
9 l 1 0 0 5 5 7 2 0 


49766.83330 7 7 5 1 2 
2 4 7 8 0 1 1 1 1 0 


3 0 6 6 3 3 0 4 4 4 
6 0 1 2 2 
1 l 8 9 8 


RK~TIUGTJU) 
2 


() 


() 


REF ID:A56886 


RES't'RIOCf'EB 


26 
6. The enemy is using a system incorporating a 10 x 10 bipartite square 


A 


B 


c 


D 


E 


F 


G 


H 


' 


J 


K 
/ 
L 


consisting of letters, digits and syllables. The row and column coordinates are 
invariable, but a different internal chart is used each day. The chart for 16 Decem- 


, her was reconstructed and found to be based on the keyword PYRAMIDS as 
follows: 


0 
1 
2 
3 
4 
5 
6 
7 
8 
9 


0 
1 
2 
3 
4 
5 
6 
7 
8 
9 


p 
1 M 
D 
2 


EA 


6 
L 
OR 


THR 


y 
R 
AL 
AN 


ME 
I 
4 
DA 
BE 
c 
ED 
EN 
G 
7 
LA 
LE 


OU 
Q 
TI 
TO 


RA 
RE 
AND 
AR 
9 
IN 
DE 
s 


3 
CA 
ENT 
ER 
H 
8 
N ND 
T 
TE 
u 
v 


RED 
RES 
RI 
RO 
A 
ARE 
AS 
AT 
ATE 
ATI 
ING 
ION 
IS 
IT 
IVE 
SE 
SH 
ST 
STO 
B 
CE 
co 
COM 
E 
5 
ERE 
ERS 
ES 
EST 
F 


HAS 
HE 
J 
f6 
K 
NE 
NT 
0 
OF 
ON 


TED 
TER 
TH 
THE 
THI 
VE 
w 
WE 
x 
z 


. The next day the following cryptogram, suspected to contain the word CROSS- 
ROADS, was intercepted. Solve the text, reconstruct the chart for the day, and 
deterniine the specific key: 
5 
10 
15 


20 
88 50 58 95 63 62 30 69 69 94 15 58 92 07 


84 73 60 
~5 77 95 
61 
38 78 30 50 66 94 15 44 


84 62 12 12 20 38 31 42 67 67 93 52 
01 
83 10 


32 02 79 10 .36 
84 72 94 44 68 79 
54 78 69 50 ---- 


58 95 58 79 62 14 30 50 71 
94 3S 87 79 97 58 


02 02 10· 78 47 22 97 58 88 09 84 53 03 
01 
93 


44 78 79 79 78 30 50 79 57 55 59 54 08 54 94 


72 89 72 60 82 72 94 44 92 
07 79 82 05 
10 79 


94 10 10 
02 
58 28 '97 .58 
02 
02 43 69 05 96 50 


93 50 58 95 63 58 07 
11 
21 
50 71 
94 35 84 27 


30 54 fn 50 
35 68 


3 
ltESTltIGTED 
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PARTIAL ANALYSIS SHEETS 
LESSON 9, MILITARY CRYPTANALYSIS, PART I 


Problem 3 
l 
In taking a uniliteral frequency distribution of this cryptogram, it was observed that 
the positions of the peaks and troughs of the distribution seemed to change during the 
compilation. The over-all distribution is 


8 7 9 6 6 12 10 20 19 11 18 9 9 5 6 9 21 4 22 10 24 5 19 8 21 3 N =300 
ABCDEF G HI J 
KLMNOPQRS T UVWXYZ 
qi=4136 
E(qip) =5983 
E(qi.) =3363 


If the cryptogram is divided into two 150-letter sections, then the distributions are as follows: 


5 4 5 2 1 7 5 8 10 9 12 5 6 1 4 2 10 - 10 2 14 2 9 3 13 1 
1. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z qi= 1144 


3 3 4 4 5 5 5 12 9 2 5 4 3 4 2 7 11 4 12 8 10 3 10 5 8 2 
2. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z qi= 970 
E(qip) =1520 
E(qi.) =868 


When the message is divided into three 100-letter sections, then 


5 2 2 2 1 6 5 5 8 4 6 3 5 1 3 - 
9 - 6 11116161 
1. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y · Z qi= 498 


2 3 5 - 
4 1 3 4 6 6 7 3 2 2 2 8 5 3 5 1 5 2 6 2 13 - 
2. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z qi= 484 
12241 5 2115 l 4 3 2 2 1171118 8 2 7 5 2 2 
3. 
A B C D E. F G H I J K L M N 0 P Q R S T U V W X Y Z qi= 522 


E(qip) =660 
E(qi.) =381 


When divided into four 75-letter sections, the distributions are 


4 121 1544 5 3 4 3 5 11 - 
6 - 4 1111 4 - 
3 1 
1. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z qi= 293 


1 3 3 1 - 
2 1 4 5 6 8 2 1 - 
3 2 4 - 
6 1 3 1 5 3 10 - 
2. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z qi= 306 


2 2 2 1 5 2 3 2 4 1 2 2 2 2 1 6 5 4 5 4 2 3 3 3 7 - 
3. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z qi= 212 


1 1 2 3 - 
3 2 10 5 1 3 2 1 2 1 1 6 - 7 4 8 - 7 2 1 2 
4. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z qi= 322 


E(qip) =370 
E(qi.) =212 


RRS'I' RI O'i'EB 
4 
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Upon dividing the text into five 60-letter sections, the distributions are 


4 1 - 1 1 3 3 4 5 3 2 3 5 1 1 - 4 - 3 1 8 1 3 - 2 1 
1. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z q, = 180 


1 1 4 1 - 3 2 2 3 4 5 2 1 - 2 - 5 - 7 - 3 1 4 l 8 - 
2. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 4'= 200 


- 3 2 - 2 1 - 2 6 3 5 - l 2 2 6 3 2 1 1 4 1 4 2 7 - 
3. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z q, = 178 


2 l 2 3 3 4 4 3 - - 2 2 l - - 2 4 2 5 7 2 2 1 4 4 - 
4. 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z q, = 156 


1 1 1 1 - 1 1 9 5 1 3 2 l 2 1 1 5 - 6 1 7 - 7 1 - 2 
5. · 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z q, = 238 


I 
E(q,p) =236 
E(q,.) = 136 


Finally, upon dividing t;he cryptogram into six 50-letter sections, the distributions are 


1. 


2. 


3. 


4. 


5. 


6. 


::::: 
:::::- 
-- 
A B C D E. F G H I J K L M N 0 P Q R S T U V W X Y Z q,= 123 


:::::::::: 
~ 
~-- 
------::::::-...... z::-... 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z q, = 142 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z q,= 138 


-... 
......... 
-- -- 
-- 
-- 
---- . 
__ 
...._ 
::z ~ '."'--.. 
......... 
:::z 
~--~ 
~ 
------~------~--~~~-- 
~ 
......... ~ 
~ 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z q,= 122 


...._ 
-- 
~~ 
::::::::~--~~~ 
------ 
~ ......... ~~::::~ 
~~ 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 4>= 148 


::::: 
-- 
-- 
~~--~~--~ --~ ~--~ ~ 
~ 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z q, = 192 


E(lf>p) =163 
E(q,.) =94 


This last set of distributions gives the most satisfactory results,. both as regards the 


q,-test arul also the expected number of bl,anks (cf. chart on page 25 of Text). From these 
several sets of distributions we were trying to determine the first two or three sections of the 
t.ext that were monoalphabetically enciphered. The division not only seeins to be approx- 
imately 50 letters, but it also appears that practically all the sections are of equal length. 


5 
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Military Cryptanalysis, Part I 


3 
None 
Cross-section paper of X inch squares 
None 


Until now the problems of each lesson have followed very closely the order of subject 
_ matter in the text, so that the student knew fairly well what types of sy~tems were involved. 
This exaniination is designed to' test the student's power of observation arid logic in determin- 
ing the general cryptographic system. All that is required in the five problems below is the 
-determination of the general system, together with the reasons for the particular clasSifica- 
tion. Solution of the message teXts is not mandatory, but strongly recommended: recovery 
of the plaintexts and specific keys certainly would furnish the student with irrefutable proof 
of the validity of his hypotheses. 
' 


20 
1. 
L W HP C 
X B V L W H V K Z J 
P B P G R BX HS L 


QKRHV FR L X B 
T C S B P KS B Z K RC NB P 


F W HP D WHVGT BP D SB NDQKW FT B VF 


QFRHR.DZDSH PDQ K Z BX G V H NLRFX 


HQ CZ K SB v·J Q ·MR H X B SL QB R 
F W JS B 


T K Z H W MS B NL SB QB X KSDTH TM NH P 


CT BP H VD SJ V DWHVH NL Q HP C Q C R B 


RLWKR HVFXF RB NC S BP JP H VDZFZ 


B V L WC 
W B Z F S 
B W BP L xx xx x 


1 
RE8'FRI0'f'KD 
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2. EMURB WP Z LS ERMWU R 0 B 0 P UWBWB 


Q T I 0 N 
I YB HY V MI W B 
E G 0 P S 
C D V C C 


0 DC XS 0 U DI Y MCYXD Y HS 0 U SM 0 NB 


Q T I 0 N 
0 B 0 P Z 
D N 0 I L LB ER 0 RTREM 


DTENR TB NT A K B C 0 0 
B 0 B E Z SK Z ZS 


M~GEB D F G NS HR LI X SES V R LES U U 


SK SP E WLDEG B W D MT Z TI 0 N SI V ME 


RETAK PH TIM B H H 0 H 
I Z U D M 0 EK HP 


20 
3. 
G HU IP G J HNI MB SP R 
I USN S SH PG B 


' 
R Q SA J 
0 0 Q R S 
S I P Q S MHVJI P QI V V 


JFK I H GS ANY PT K K D Y J K Q X 
Z V NP R 


0 Q NJ S NUYEF EN P Z V NP R 0 Q QT KL N 


FF H 0 N Q up 0 Q HU QT V 
0 T N D 0 
J T KL P 


0 W 0 J T 
E J W N Q EK JAE I 0 U T I 
Q Q GT B 


ANNKZ XVUKR EMMQR R T E I I 
KVPXV 


UKRRE MW KI K v p xv u D A E I P R S Q I I 


G W Q L Q u xv v x VU AT G w Q Q v p 
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4. These tw.o messages were intercepted on the same circuit dqring a morning 


offensive. 


Message "A" 


l L P U R PS B 0 K YBDGY Y NC NP V X H CJ 


R 0 K FI NP XV P EWHLX KWYXQ B VY DB 


YYZCX 


Message "B" 


RBVYW BY Y Z C THEEB MME Z I 
ABXHW 


SYXCK NNBYM SXQDY A E PC X 


20 
5. 


SWWSN SDWPN X D F·Q F DSC D F AWKDM 
( 
VDZFD Q YIN B 
PG PPG LAT N N T QR TS 


I HY X M 0 UP W N YT VA P U G 0 B Z 
R Z F QI 


HNDKD XDAUB 0 D FF D 
I N W T W UPGBO 


ALDWK XU BIZ Z P P G I 
NA E,A R ZAUMM 


U XI Y V 
I 0 E X F 
Q WP WI Q DAR 0 
Z FY HI 


P M B 0 0 BAD NW TB BT A GB Z PH W SQ R 0 
' 


B WIN W AV Z 0 X FFYNG D Q 0 Z H y x z z x 


NG D NI FT R WI AUPRR P V S 0 N MB GS P 


ZGQDF 
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